Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersPHP file inclusion via insert tags
Cross-Site Scripting via Rich-Text Content
Drupal core - SA-CORE-2021-005
Improper Access Control in Dolibarr
Code injection in topthink/think
Cross Site Scripting in LavaLite CMS
No Restriction of Excessive Authentication Attempts in Firefly III
Improper Input Validation in Centreon Web
drupal/pages_restriction - SA-CONTRIB-2021-024
Incorrect Authorization in TYPO3 extension
Missing Authorization in TYPO3 extension
Missing Authorization in TYPO3 extension
Missing Authorization in TeamPass
Incorrect Authorization in TeamPass
Information Disclosure in User Authentication
Cross-Site Scripting in Backend Grid View
Cross-Site Scripting in Query Generator & Query View
Cross-Site Scripting in Page Preview
drupal/form_mode_manager - SA-CONTRIB-2021-023
Drupal core - SA-CORE-2021-004
Cross-site Scripting in Froala WYSIWYG Editor
SQL injection in pimcore/pimcore
Files or Directories Accessible to External Parties in ether/logs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.